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What is claimed is: 

1. A method for managing alternate site switching in an optical 
communication system having a protected end-system in communication 
5 with a primary end-system over an optical communication network, the 
method comprising: 

designating at least one backup end-system to back up the primary 
end-system; 

constructing a failover tree to the at least one backup end-system; 
10 detecting a degradation or failure affecting the primary end-system; 

and 

switching traffic from the primary end-system to one of said at least 
one backup end-systems. 

15 2. The method of claim 1, wherein designating at least one backup end- 
system to back up the primary end-system comprises: 

receiving a setup request from the protected end-system specifying the 
at least one backup end-system. 

20 3. The method of claim 1, wherein designating at least one backup end- 
system to back up the primary end-system comprises: 

automatically discovering the at least one backup end-system using a 
predetermined auto-discovery mechanism. 

25 4. The method of claim 1, wherein constructing a failover tree to the at 
least one backup end-system comprises: 

determining a root node for the failover tree; and 
constructing the failover tree rooted at the root node. 

30 5. The method of claim 4, wherein determining a root node for the 
failover tree comprises: 
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identifying a candidate node that is within a predetermined distance 
from the at least one backup end-system; 

constructing a shortest-path spanning tree from the candidate node to 
the at least one backup end-system; and 
5 selecting the candidate node as the root node if and only if the shortest- 

path spanning tree does not include any link from the protected end-system 
to the candidate node. 


6. The method of claim 5, wherein identifying a candidate node that is 
10 within a predetermined distance from the backup end-system comprises: 

using a marking scheme to identify the candidate node. 

7. The method of claim 5, wherein identifying a candidate node that is 
within a predetermined distance from the backup end-system comprises: 

15 solving a geometrical problem to identify the candidate node. 


8. The method of claim 5, wherein constructing a shortest-path spanning 
tree from the candidate node to the at least one backup end-system comprises: 

constructing the shortest-path spanning tree from the candidate node 
20 to the at least one backup end-system based upon topology information 
obtained from a routing protocol. 

9. The method of claim 4, wherein constructing the failover tree rooted at 
the root node comprises: 

25 sending a setup request message specifying a failover tree structure to 

various nodes in the optical communication network; 

reserving appropriate lightpath resources by nodes associated with a 
lightpath to the primary end-system; and 

recording the failover tree structure by nodes associated with the 
30 failover tree. 
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10. The method of claim 1, wherein detecting a degradation or failure 
affecting the primary end-system comprises at least one of: 

monitoring a bearer channel between the primary end-system and a 
corresponding edge node in the optical communication network; and 
5 querying the primary end-system by an optical service agent in said 

corresponding edge node. 

11. The method of claim 1, wherein switching traffic from the primary 
end-system to one of said at least one backup end-systems comprises: 

10 determining a failover node along the failover tree in the optical 

communication network; 

establishing a backup lightpath from the failover node to a backup 
end-system; and 

switching traffic to the backup lightpath by the failover node. 

15 

12. The method of claim 11, wherein determining a failover node along the 
failover tree in the optical communication network comprises: 

propagating a release message upstream from a primary edge node 
associated with the primary end-system toward a predetermined root node of 
20 the failover tree; 

receiving the release message by an intermediate node between the 
predetermined root node and the primary end-system; and 

determining by said intermediate node that the intermediate node 
supports a backup end-system. 

25 

13. The method of claim 11, wherein establishing a backup lightpath from 
the failover node to a backup end-system comprises: 

sending a lightpath setup request message by the failover node 
downstream toward the backup end-system; and 
30 reserving appropriate lightpath resources by a number of nodes 

between the failover node and the backup end-system. 
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14. The method of claim 11, wherein switching traffic to the backup 
lightpath by the failover node comprises: 

sending a connect message by a backup edge node associated with the 
backup end-system to the failover node; and 
5 switching traffic to the backup lightpath by the failover node upon 

receiving said connect message. 

15. The method of claim 11, further comprising: 

relinquishing lightpath resources by a number of nodes from the 
10 failover node to the primary end-system. 

16. The method of claim 1, further comprising: 
determining that the primary end-system is available; and 
switching traffic back to the primary end-system. 

15 

17. The method of claim 1, further comprising: 
determining that the primary end-system is available; and 
designating the primary end-system to back up the backup end- 
system. 
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18. A device for managing alternate site switching in an optical 
communication system having a protected end-system in communication 
with a primary end-system over an optical communication network, the 
device comprising: 

5 backup end-system designation logic operably coupled to designate at 

least one backup end-system to back up the primary end-system; and 

failover tree construction logic operably coupled to construct a failover 
tree to the at least one backup end-system. 

10 19. The device of claim 18, wherein the backup end-system designation 
logic is operably coupled to receive a setup request from the protected end- 
system specifying the at least one backup end-system. 

20. The device of claim 18, wherein the backup end-system designation 
15 logic is operably coupled to automatically discover the at least one backup 

end-system using a predetermined auto-discovery mechanism. 

21. The device of claim 18, wherein the failover tree construction logic is 
operably coupled to determine a root node for the failover tree and construct 

20 the failover tree rooted at the root node. 

22. The device of claim 21, wherein the failover tree construction logic is 
operably coupled to determine a root node for the failover tree by identifying 
a candidate node that is within a predetermined distance from the at least one 

25 backup end-system, constructing a shortest-path spanning tree from the 
candidate node to the at least one backup end-system, and selecting the 
candidate node as the root node if and only if the shortest-path spanning tree 
does not include any link from the protected end-system to the candidate 
node. 

30 

23- The device of claim 22, wherein the failover tree construction logic uses 
a marking scheme to identify the candidate node. 
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24. The device of claim 22, wherein the failover tree construction logic 
solves a geometrical problem to identify the candidate node. 

5 25. The device of claim 22, wherein the failover tree construction logic 
constructs the shortest-path spanning tree from the candidate node to the at 
least one backup end-system based upon topology information obtained from 
a routing protocol. 

10 26. The device of claim 21, wherein the failover tree construction logic is 
operably coupled to construct the failover tree rooted at the root node by 
sending a setup request message specifying a failover tree structure to various 
nodes in the optical communication network. 


-64- 


2204-B 11-141874 (13767BAUS01U) 
08/15/01 

27. A device for managing alternate site switching in an optical 
communication system having a protected end-system in communication 
with a primary end-system over an optical communication network, the 
device comprising; 

a failover tree database for recording the structure of a failover tree 
having at least a root node; 

detection logic operably coupled to detect a degradation or failure 
affecting the primary end-system; and 

signaling logic operably coupled to send a release message upstream 
toward the root node when the detection logic detects the degradation or 
failure affecting the primary end-system. 

28. The device of claim 27, wherein the detection logic is operably coupled 
to detect a degradation or failure affecting the primary end-system by at least 
one of: 

monitoring a bearer channel to the primary end-system; and 
querying the primary end-system. 

29. The device of claim 27, further comprising: 

lightpath logic operably coupled to relinquish lightpath resources 
associated with a primary lightpath to the primary end-system. 
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30. A device for managing alternate site switching in an optical 
communication system having a protected end-system in communication 
with a primary end-system over an optical communication network, the 
device comprising: 

5 a failover tree database for recording the structure of a failover tree 

having a backup end-system;; 

first receiving logic operably coupled to receive a release message; and 
switching logic operably coupled to switch traffic from a primary end- 
system to a backup end-system when the first receiving logic receives the 
10 release message. 

31. The device of claim 30, wherein the switching logic is operably coupled 
to send a lightpath setup request message downstream toward the backup 
end-system to establish a backup lightpath, reserve lightpath resources for the 

15 backup lightpath, and switch traffic to the backup lightpath. 
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32. An optical communication system for managing alternate site 
switching, the optical communication system comprising a plurality of end- 
systems including a protected end-system, a primary end-system, and at least 
one backup end-system coupled over an optical communication network, 

5 wherein each end-system interfaces with the optical communication network 
through a corresponding optical edge node, and wherein a failover tree is 
constructed to the at least one backup end-system and traffic is switched from 
the primary end-system to a backup end-system upon detecting a 
degradation or failure affecting the primary end-system. 

10 

33. The optical communication system of claim 32, wherein the protected 
end-system is operably coupled to send a setup request message to its 
corresponding optical edge node indicating the at least one backup end- 
system. 

15 

34. The optical communication system of claim 33, wherein the optical 
edge node corresponding to the protected end-system is operably coupled to 
automatically discover the at least one backup end-system using a 
predetermined auto-discovery mechanism. 

20 

35. The optical communication system of claim 33, wherein the optical 
edge node corresponding to the protected end-system is operably coupled to 
construct the failover tree to the backup end-system. 

25 36. The optical communication system of claim 35, wherein the optical 

edge node corresponding to the protected end-system is operably coupled to 
determine a root node for the failover tree and construct the failover tree 
rooted at the root node. 

30 37. The optical communication system of claim 36, wherein the optical 
edge node corresponding to the protected end-system is operably coupled to 
determine a root node for the failover tree by identifying a candidate node 
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that is within a predetermined distance from the at least one backup end- 
system, constructing a shortest-path spanning tree from the candidate node to 
the at least one backup end-system, and selecting the candidate node as the 
root node if and only if the shortest-path spanning tree does not include any 
5 link from the protected end-system to the candidate node. 

38. The optical communication system of claim 36, wherein the optical 
edge node corresponding to the protected end-system is operably coupled to 
send a setup request message specifying a failover tree structure to various 

10 nodes in the optical communication network. 

39. The optical communication system of claim 38, wherein nodes 
associated with a primary lightpath to the primary end-system are operably 
coupled to reserve appropriate lightpath resources for the primary lightpath 

15 to the primary end-system. 

40. The optical communication system of claim 38, wherein nodes 
associated with the failover tree are operably coupled to record the failover 
tree structure. 

20 

41. The optical communication system of claim 32, wherein the optical 
edge node associated with the primary end-system is operably coupled to 
detect a degradation or failure affecting the primary end-system. 

25 42. The optical communication system of claim 41, wherein the optical 
edge node associated with the primary end-system is operably coupled to 
detect a degradation or failure affecting the primary end-system by at least 
one of: 

monitoring a bearer channel between the primary end-system and a 
30 corresponding edge node in the optical communication network; and 

querying the primary end-system by an optical service agent in said 
corresponding edge node. 
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43. The optical communication system of claim 41, wherein the optical 
edge node associated with the primary end-system is operably coupled to 
send a release message upstream toward a root node of the failover tree upon 

5 detecting a degradation or failure affecting the primary end-system. 

44. The optical communication system of claim 43, wherein a failover node 
of the failover tree is operably coupled to establish a backup lightpath from 
the failover node to a backup end-system and switch traffic to the backup 

10 lightpath by the failover node upon receiving the release message. 

45. The optical communication system of claim 44, wherein the failover 
node is operably coupled to send a lightpath setup request message 
downstream toward the backup end-system in order to establish a backup 

15 lightpath. 

46. The optical communication system of claim 45, wherein a number of 
nodes between the failover node and the backup end-system are operably 
coupled to reserve appropriate lightpath resources for the backup lightpath. 

20 

47. The optical communication system of claim 45, wherein the failover 
node is operably coupled to switch traffic to the backup lightpath upon 
receiving a connect message from the optical edge node associated with the 
backup end-system. 
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